naracli 1.0.17 → 1.0.22

package/src/cli/utils/validation.ts

@@ -66,46 +66,6 @@ export function validateNonNegativeNumber(
   return num;
 }
 
-/**
- * Validate swap mode string
- * @param mode Mode string
- * @returns Validated mode string
- * @throws Error if invalid
- */
-export function validateSwapMode(mode: string): string {
-  const validModes = ["exact-in", "partial-fill", "exact-out"];
-  const normalized = mode.toLowerCase();
-
-  if (!validModes.includes(normalized)) {
-    throw new Error(
-      `Invalid swap mode: ${mode}. Must be one of: ${validModes.join(", ")}`
-    );
-  }
-
-  return normalized;
-}
-
-/**
- * Validate direction string
- * @param direction Direction string
- * @returns Validated direction string
- * @throws Error if invalid
- */
-export function validateDirection(direction: string): string {
-  const validDirections = ["buy", "sell"];
-  const normalized = direction.toLowerCase();
-
-  if (!validDirections.includes(normalized)) {
-    throw new Error(
-      `Invalid direction: ${direction}. Must be one of: ${validDirections.join(
-        ", "
-      )}`
-    );
-  }
-
-  return normalized;
-}
-
 /**
  * Validate required option
  * @param value Option value

package/src/cli/utils/wallet.ts

@@ -5,7 +5,9 @@
 import { Keypair } from "@solana/web3.js";
 import { join } from "node:path";
 import { homedir } from "node:os";
-import { DEFAULT_RPC_URL, DEFAULT_WALLET_PATH as _DEFAULT_WALLET_PATH } from "../../constants";
+import { DEFAULT_RPC_URL } from "nara-sdk";
+
+const _DEFAULT_WALLET_PATH = process.env.WALLET_PATH || "~/.config/nara/id.json";
 
 /**
  * Resolve wallet path (expand ~ to home directory)

package/src/tests/helpers.ts

@@ -0,0 +1,78 @@
+/**
+ * Test helpers - run the CLI as a subprocess and capture output
+ */
+
+import { spawn } from "node:child_process";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { readFileSync, existsSync } from "node:fs";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const CLI = join(__dirname, "../../bin/nara-cli.ts");
+const ROOT = join(__dirname, "../../");
+const ENV_FILE = join(ROOT, ".env");
+
+/** Parse .env file into an object (simple key=value, skips comments) */
+function loadEnvFile(path: string): Record<string, string> {
+  if (!existsSync(path)) return {};
+  const env: Record<string, string> = {};
+  for (const line of readFileSync(path, "utf8").split("\n")) {
+    const trimmed = line.trim();
+    if (!trimmed || trimmed.startsWith("#")) continue;
+    const idx = trimmed.indexOf("=");
+    if (idx < 0) continue;
+    const key = trimmed.slice(0, idx).trim();
+    const val = trimmed.slice(idx + 1).trim();
+    if (key) env[key] = val;
+  }
+  return env;
+}
+
+const ENV = loadEnvFile(ENV_FILE);
+
+export interface CliResult {
+  stdout: string;
+  stderr: string;
+  exitCode: number;
+}
+
+/**
+ * Run the CLI with given args, stream stdout/stderr to parent in real-time
+ * while also capturing them for assertions.
+ */
+export function runCli(args: string[], extraEnv: Record<string, string> = {}): Promise<CliResult> {
+  return new Promise((resolve) => {
+    const child = spawn("npx", ["tsx", CLI, ...args], {
+      env: { ...process.env, ...ENV, ...extraEnv },
+      timeout: 120_000,
+    });
+
+    let stdout = "";
+    let stderr = "";
+
+    child.stdout.setEncoding("utf8");
+    child.stderr.setEncoding("utf8");
+
+    child.stdout.on("data", (chunk: string) => {
+      stdout += chunk;
+      process.stdout.write(chunk);
+    });
+
+    child.stderr.on("data", (chunk: string) => {
+      stderr += chunk;
+      process.stderr.write(chunk);
+    });
+
+    child.on("close", (code) => {
+      resolve({ stdout, stderr, exitCode: code ?? 1 });
+    });
+  });
+}
+
+/** Whether a wallet is configured (for write-command tests) */
+export const hasWallet = !!(ENV.PRIVATE_KEY || process.env.PRIVATE_KEY);
+
+/** Generate a unique test resource name using a timestamp */
+export function uniqueName(prefix: string): string {
+  return `${prefix}-${Date.now().toString(36)}`;
+}

package/src/tests/skills.e2e.test.ts

@@ -0,0 +1,126 @@
+/**
+ * End-to-end tests for `skills` commands (hits real testnet)
+ *
+ * Requires PRIVATE_KEY in .env and sufficient NARA balance.
+ * Run: npm run test:e2e
+ */
+
+import { describe, it, before, after } from "node:test";
+import assert from "node:assert/strict";
+import { writeFileSync, unlinkSync, mkdtempSync } from "node:fs";
+import { join } from "node:path";
+import { tmpdir } from "node:os";
+import { runCli, hasWallet, uniqueName } from "./helpers.js";
+
+if (!hasWallet) {
+  console.log("Skipping skills e2e tests: PRIVATE_KEY not set");
+  process.exit(0);
+}
+
+// ─── Shared state across tests ────────────────────────────────────
+
+const SKILL_NAME = uniqueName("e2e-skill");
+const AUTHOR = "e2e-test-author";
+let tmpDir: string;
+let contentFile: string;
+
+// ─── Setup ────────────────────────────────────────────────────────
+
+before(() => {
+  tmpDir = mkdtempSync(join(tmpdir(), "naracli-test-"));
+  contentFile = join(tmpDir, "skill-content.md");
+  writeFileSync(contentFile, `# ${SKILL_NAME}\n\nThis is e2e test content.\n`);
+  console.log(`\nUsing skill name: ${SKILL_NAME}`);
+});
+
+// ─── Cleanup ──────────────────────────────────────────────────────
+
+after(async () => {
+  try { unlinkSync(contentFile); } catch {}
+  // Delete on-chain skill (reclaim rent)
+  const { exitCode, stderr } = await runCli(["skills", "delete", SKILL_NAME]);
+  if (exitCode !== 0) {
+    console.warn(`  Warning: failed to delete skill "${SKILL_NAME}": ${stderr}`);
+  } else {
+    console.log(`  Cleaned up skill "${SKILL_NAME}"`);
+  }
+});
+
+// ─── Tests ────────────────────────────────────────────────────────
+
+describe(`skills e2e (name=${SKILL_NAME})`, () => {
+  it("register skill on-chain", async () => {
+    const { stdout, stderr, exitCode } = await runCli([
+      "skills", "register", SKILL_NAME, AUTHOR,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    assert.ok(stdout.includes("registered") || stdout.includes("Transaction"), `stdout: ${stdout}`);
+  });
+
+  it("get skill returns correct name and author", async () => {
+    const { stdout, exitCode, stderr } = await runCli([
+      "skills", "get", "--json", SKILL_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    const json = JSON.parse(stdout);
+    assert.equal(json.name, SKILL_NAME);
+    assert.equal(json.author, AUTHOR);
+    assert.equal(json.version, 0);
+    assert.equal(json.description, null);
+  });
+
+  it("set-description updates description", async () => {
+    const desc = "An e2e test skill";
+    const { exitCode, stderr } = await runCli([
+      "skills", "set-description", SKILL_NAME, desc,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+
+    const { stdout } = await runCli(["skills", "get", "--json", SKILL_NAME]);
+    const json = JSON.parse(stdout);
+    assert.equal(json.description, desc);
+  });
+
+  it("set-metadata updates metadata", async () => {
+    const meta = JSON.stringify({ env: "e2e", version: "1.0.0" });
+    const { exitCode, stderr } = await runCli([
+      "skills", "set-metadata", SKILL_NAME, meta,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+
+    const { stdout } = await runCli(["skills", "get", "--json", SKILL_NAME]);
+    const json = JSON.parse(stdout);
+    assert.equal(json.metadata, meta);
+  });
+
+  it("upload content and read back matches original", async () => {
+    const { exitCode, stderr } = await runCli([
+      "skills", "upload", SKILL_NAME, contentFile,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+
+    // Read back via skills content
+    const { stdout: contentOut, exitCode: cExit } = await runCli([
+      "skills", "content", SKILL_NAME,
+    ]);
+    assert.equal(cExit, 0);
+    assert.ok(contentOut.includes(SKILL_NAME), `content mismatch: ${contentOut}`);
+  });
+
+  it("skills content --json includes size field", async () => {
+    const { stdout, exitCode } = await runCli([
+      "skills", "content", "--json", SKILL_NAME,
+    ]);
+    assert.equal(exitCode, 0);
+    const json = JSON.parse(stdout);
+    assert.ok(typeof json.size === "number" && json.size > 0);
+    assert.ok(typeof json.content === "string" && json.content.length > 0);
+  });
+
+  it("get skill shows updated version after upload", async () => {
+    const { stdout, exitCode } = await runCli(["skills", "get", "--json", SKILL_NAME]);
+    assert.equal(exitCode, 0);
+    const json = JSON.parse(stdout);
+    assert.ok(json.version >= 1, `expected version >= 1, got ${json.version}`);
+  });
+});

package/src/tests/skills.test.ts

@@ -0,0 +1,192 @@
+/**
+ * Tests for `skills` CLI commands
+ *
+ * Run: npm test
+ */
+
+import { describe, it, after } from "node:test";
+import assert from "node:assert/strict";
+import { join, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
+import { runCli, hasWallet, uniqueName } from "./helpers.js";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const TEST_SKILL_FILE = join(__dirname, "test_skill.md");
+
+// ─── Help output ──────────────────────────────────────────────────
+
+describe("skills --help", () => {
+  it("shows all subcommands", async () => {
+    const { stdout, exitCode } = await runCli(["skills", "--help"]);
+    assert.equal(exitCode, 0);
+    for (const cmd of ["register", "get", "content", "set-description", "set-metadata", "upload", "transfer", "close-buffer", "delete"]) {
+      assert.ok(stdout.includes(cmd), `missing command: ${cmd}`);
+    }
+  });
+
+  it("skills register --help shows <name> and <author>", async () => {
+    const { stdout, exitCode } = await runCli(["skills", "register", "--help"]);
+    assert.equal(exitCode, 0);
+    assert.ok(stdout.includes("<name>"));
+    assert.ok(stdout.includes("<author>"));
+  });
+
+  it("skills upload --help shows <file>", async () => {
+    const { stdout, exitCode } = await runCli(["skills", "upload", "--help"]);
+    assert.equal(exitCode, 0);
+    assert.ok(stdout.includes("<file>"));
+  });
+
+  it("skills content --help shows --hex option", async () => {
+    const { stdout, exitCode } = await runCli(["skills", "content", "--help"]);
+    assert.equal(exitCode, 0);
+    assert.ok(stdout.includes("--hex"));
+  });
+});
+
+// ─── Argument validation (no chain needed) ────────────────────────
+
+describe("skills argument errors", () => {
+  it("skills get with no name exits non-zero", async () => {
+    const { exitCode } = await runCli(["skills", "get"]);
+    assert.notEqual(exitCode, 0);
+  });
+
+  it("skills register with missing author exits non-zero", async () => {
+    const { exitCode } = await runCli(["skills", "register", "myskill"]);
+    assert.notEqual(exitCode, 0);
+  });
+
+  it("skills set-metadata rejects invalid JSON", async () => {
+    if (!hasWallet) return;
+    const { stderr, exitCode } = await runCli(["skills", "set-metadata", "anyskill", "not-valid-json"]);
+    assert.equal(exitCode, 1);
+    assert.ok(stderr.includes("Invalid JSON"), `stderr: ${stderr}`);
+  });
+
+  it("skills transfer rejects invalid public key", async () => {
+    if (!hasWallet) return;
+    const { stderr, exitCode } = await runCli(["skills", "transfer", "anyskill", "not-a-pubkey"]);
+    assert.equal(exitCode, 1);
+    assert.ok(stderr.includes("Invalid public key"), `stderr: ${stderr}`);
+  });
+
+  it("skills upload with non-existent file fails", async () => {
+    if (!hasWallet) return;
+    const { exitCode, stderr } = await runCli(["skills", "upload", "anyskill", "/tmp/__no_such_file__.bin"]);
+    assert.equal(exitCode, 1);
+    assert.ok(stderr.length > 0);
+  });
+});
+
+// ─── Read-only chain queries ──────────────────────────────────────
+
+describe("skills read-only queries", () => {
+  it("skills get non-existent skill exits with error", async () => {
+    const { exitCode, stderr } = await runCli(["skills", "get", "definitely-does-not-exist-xyz123"]);
+    assert.equal(exitCode, 1);
+    assert.ok(stderr.length > 0);
+  });
+});
+
+// ─── Success cases (requires wallet) ─────────────────────────────
+
+describe("skills success cases", () => {
+  const SKILL_NAME = uniqueName("unit-skill");
+  const AUTHOR = "unit-test-author";
+
+  after(async () => {
+    if (!hasWallet) return;
+    await runCli(["skills", "delete", SKILL_NAME]);
+  });
+
+  it("register a new skill on-chain", async () => {
+    if (!hasWallet) return;
+    const { stdout, stderr, exitCode } = await runCli([
+      "skills", "register", SKILL_NAME, AUTHOR,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    assert.ok(stdout.includes("Transaction"), `stdout: ${stdout}`);
+  });
+
+  it("get --json returns correct name, author and initial state", async () => {
+    if (!hasWallet) return;
+    const { stdout, exitCode, stderr } = await runCli([
+      "skills", "get", "--json", SKILL_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    const json = JSON.parse(stdout);
+    assert.equal(json.name, SKILL_NAME);
+    assert.equal(json.author, AUTHOR);
+    assert.equal(json.version, 0);
+    assert.equal(json.description, null);
+    assert.equal(json.metadata, null);
+    assert.ok(typeof json.authority === "string" && json.authority.length > 0);
+    assert.ok(typeof json.createdAt === "string");
+  });
+
+  it("set-description updates description on-chain", async () => {
+    if (!hasWallet) return;
+    const desc = "A unit-test skill description";
+    const { exitCode, stderr } = await runCli([
+      "skills", "set-description", SKILL_NAME, desc,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+
+    const { stdout } = await runCli(["skills", "get", "--json", SKILL_NAME]);
+    assert.equal(JSON.parse(stdout).description, desc);
+  });
+
+  it("set-metadata updates metadata on-chain", async () => {
+    if (!hasWallet) return;
+    const meta = JSON.stringify({ env: "unit-test", ok: true });
+    const { exitCode, stderr } = await runCli([
+      "skills", "set-metadata", SKILL_NAME, meta,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+
+    const { stdout } = await runCli(["skills", "get", "--json", SKILL_NAME]);
+    assert.equal(JSON.parse(stdout).metadata, meta);
+  });
+
+  it("upload test_skill.md uploads content on-chain", async () => {
+    if (!hasWallet) return;
+    const { stdout, stderr, exitCode } = await runCli([
+      "skills", "upload", SKILL_NAME, TEST_SKILL_FILE,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    assert.ok(stdout.includes("Transaction") || stdout.includes("Finalize"), `stdout: ${stdout}`);
+  });
+
+  it("get --json shows version=1 and non-null updatedAt after upload", async () => {
+    if (!hasWallet) return;
+    const { stdout, exitCode, stderr } = await runCli([
+      "skills", "get", "--json", SKILL_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    const json = JSON.parse(stdout);
+    assert.equal(json.version, 1);
+    assert.ok(json.updatedAt !== null, "updatedAt should be set after content upload");
+  });
+
+  it("content --json reads back uploaded file", async () => {
+    if (!hasWallet) return;
+    const { stdout, exitCode, stderr } = await runCli([
+      "skills", "content", "--json", SKILL_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    const json = JSON.parse(stdout);
+    assert.ok(typeof json.size === "number" && json.size > 0);
+    assert.ok(typeof json.content === "string" && json.content.length > 0);
+  });
+
+  it("delete removes the skill from chain", async () => {
+    if (!hasWallet) return;
+    const { exitCode, stderr } = await runCli(["skills", "delete", SKILL_NAME]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+
+    // Verify it's gone
+    const { exitCode: getExit } = await runCli(["skills", "get", SKILL_NAME]);
+    assert.equal(getExit, 1);
+  });
+});

package/src/tests/test_skill.md

@@ -0,0 +1,18 @@
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL
+TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL TEST SKILL

package/src/tests/zkid.e2e.test.ts

@@ -0,0 +1,128 @@
+/**
+ * End-to-end tests for `zkid` commands (hits real testnet)
+ *
+ * Requires PRIVATE_KEY in .env and sufficient NARA balance.
+ * Run: npm run test:e2e
+ */
+
+import { describe, it } from "node:test";
+import assert from "node:assert/strict";
+import { runCli, hasWallet, uniqueName } from "./helpers.js";
+
+if (!hasWallet) {
+  console.log("Skipping zkid e2e tests: PRIVATE_KEY not set");
+  process.exit(0);
+}
+
+// ─── Shared state ─────────────────────────────────────────────────
+
+const ZKID_NAME = uniqueName("e2e-zkid");
+console.log(`\nUsing ZK ID name: ${ZKID_NAME}`);
+
+// ─── Tests ────────────────────────────────────────────────────────
+
+describe(`zkid e2e (name=${ZKID_NAME})`, () => {
+  // ── id-commitment (pure crypto, no chain) ──────────────────────
+
+  it("id-commitment outputs a deterministic 64-char hex", async () => {
+    const r1 = await runCli(["zkid", "id-commitment", "--json", ZKID_NAME]);
+    const r2 = await runCli(["zkid", "id-commitment", "--json", ZKID_NAME]);
+    assert.equal(r1.exitCode, 0, `stderr: ${r1.stderr}`);
+    assert.equal(r2.exitCode, 0);
+    const c1 = JSON.parse(r1.stdout);
+    const c2 = JSON.parse(r2.stdout);
+    assert.match(c1.idCommitment, /^[0-9a-f]{64}$/);
+    assert.equal(c1.idCommitment, c2.idCommitment, "commitment not deterministic");
+  });
+
+  // ── create ─────────────────────────────────────────────────────
+
+  it("create registers a new ZK ID on-chain", async () => {
+    const { stdout, stderr, exitCode } = await runCli([
+      "zkid", "create", ZKID_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    assert.ok(stdout.includes("registered") || stdout.includes("Transaction"), `stdout: ${stdout}`);
+  });
+
+  it("create again exits 0 with warning (already exists)", async () => {
+    const { stdout, exitCode } = await runCli(["zkid", "create", ZKID_NAME]);
+    assert.equal(exitCode, 0);
+    assert.ok(stdout.includes("already exists"), `stdout: ${stdout}`);
+  });
+
+  // ── info ───────────────────────────────────────────────────────
+
+  it("info returns correct fields for existing ZK ID", async () => {
+    const { stdout, exitCode, stderr } = await runCli([
+      "zkid", "info", "--json", ZKID_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    const json = JSON.parse(stdout);
+    assert.equal(json.name, ZKID_NAME);
+    assert.equal(json.depositCount, 0);
+    assert.equal(json.commitmentStartIndex, 0);
+    assert.match(json.idCommitment, /^[0-9a-f]{64}$/);
+  });
+
+  it("id-commitment matches the commitment stored on-chain", async () => {
+    const commitResult = await runCli(["zkid", "id-commitment", "--json", ZKID_NAME]);
+    const infoResult = await runCli(["zkid", "info", "--json", ZKID_NAME]);
+    assert.equal(commitResult.exitCode, 0);
+    assert.equal(infoResult.exitCode, 0);
+    const localCommitment = JSON.parse(commitResult.stdout).idCommitment;
+    const chainCommitment = JSON.parse(infoResult.stdout).idCommitment;
+    assert.equal(localCommitment, chainCommitment, "local commitment != on-chain commitment");
+  });
+
+  // ── deposit ────────────────────────────────────────────────────
+
+  it("deposit 1 NARA into the ZK ID", async () => {
+    const { stdout, stderr, exitCode } = await runCli([
+      "zkid", "deposit", ZKID_NAME, "1",
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    assert.ok(stdout.includes("Transaction"), `stdout: ${stdout}`);
+  });
+
+  it("info shows depositCount=1 after deposit", async () => {
+    const { stdout, exitCode } = await runCli(["zkid", "info", "--json", ZKID_NAME]);
+    assert.equal(exitCode, 0);
+    const json = JSON.parse(stdout);
+    assert.equal(json.depositCount, 1);
+  });
+
+  // ── scan ───────────────────────────────────────────────────────
+
+  it("scan finds 1 claimable deposit", async () => {
+    const { stdout, exitCode, stderr } = await runCli([
+      "zkid", "scan", "--json", ZKID_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    const json = JSON.parse(stdout);
+    assert.equal(json.count, 1);
+    assert.equal(json.deposits[0].nara, 1);
+  });
+
+  // ── withdraw ───────────────────────────────────────────────────
+
+  it("withdraw sends funds to auto-generated recipient", async () => {
+    const { stdout, stderr, exitCode } = await runCli([
+      "zkid", "withdraw", "--json", ZKID_NAME,
+    ]);
+    assert.equal(exitCode, 0, `stderr: ${stderr}`);
+    const json = JSON.parse(stdout);
+    assert.ok(json.recipient, "no recipient in output");
+    assert.ok(json.signature, "no signature in output");
+    assert.equal(json.nara, 1);
+  });
+
+  it("scan shows 0 claimable deposits after withdrawal", async () => {
+    const { stdout, exitCode } = await runCli([
+      "zkid", "scan", "--json", ZKID_NAME,
+    ]);
+    assert.equal(exitCode, 0);
+    const json = JSON.parse(stdout);
+    assert.equal(json.count, 0, `expected 0, got ${json.count}`);
+  });
+});